Use secure HTTPS calls to download packages (closes #1922)

crystal-lang · Jun 24, 2016 · e1d2fcd · e1d2fcd
1 parent 6dced6c
commit e1d2fcd
Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Dockerfile.release b/Dockerfile.release
@@ -2,7 +2,7 @@ FROM ubuntu:14.04
 
 RUN \
   apt-key adv --keyserver keys.gnupg.net --recv-keys 09617FD37CC06B54 && \
-  echo "deb http://dist.crystal-lang.org/apt crystal main" > /etc/apt/sources.list.d/crystal.list && \
+  echo "deb https://dist.crystal-lang.org/apt crystal main" > /etc/apt/sources.list.d/crystal.list && \
   apt-get update && \
   apt-get install -y crystal gcc pkg-config libssl-dev git && \
   apt-get clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

diff --git a/Vagrantfile b/Vagrantfile
@@ -9,9 +9,9 @@ Vagrant.configure("2") do |config|
       c.vm.box = "ubuntu/#{box_name}"
 
       c.vm.provision :shell, inline: %(
-        curl -s http://dist.crystal-lang.org/apt/setup.sh | bash
+        curl -s https://dist.crystal-lang.org/apt/setup.sh | bash
         apt-get install -y crystal git libgmp3-dev zlib1g-dev libedit-dev libxml2-dev libssl-dev libyaml-dev libreadline-dev g++
-        curl -s http://crystal-lang.s3.amazonaws.com/llvm/llvm-3.5.0-1-linux-`uname -m`.tar.gz | tar xz -C /opt
+        curl -s https://crystal-lang.s3.amazonaws.com/llvm/llvm-3.5.0-1-linux-`uname -m`.tar.gz | tar xz -C /opt
         echo 'export LIBRARY_PATH="/opt/crystal/embedded/lib"' > /etc/profile.d/crystal.sh
         echo 'export PATH="$PATH:/opt/llvm-3.5.0-1/bin"' >> /etc/profile.d/crystal.sh
       )